$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: y/nJqJRKDI0MwzoJR1onSoW4L2nDMvKPJUz12NrgG88= Subject key identifier: 8E:6E:62:F6:D0:1A:C3:47:AB:2C:BA:23:49:A6:99:1F:BF:72:B5:F9 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 01935199AE3A3A2349DFF06F189AC0B08465 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 1029 Signing time: Fri 22 Nov 2024 02:00:46 +0000 Manifest this update: Fri 22 Nov 2024 02:00:46 +0000 Manifest next update: Sat 23 Nov 2024 02:00:46 +0000 Files and hashes: 1: 4U3QLEtSKXeLQ_0k-u3f8g5tRMQ.roa (hash: YLB3rlW24cf0fiu1S1oDRs75F35XTtB9/xtuyl+DC+w=) 2: D-Ai-BP23d7XRZW21qg9U6SK1Qo.roa (hash: 2mteIgzBd/LZJk6wOFhqvv8sdVqaXPAdV+ofiYeLbiU=) 3: DLoy_RvPM79jsBHZuYzMrBPhh34.roa (hash: LFzLDj8f7nL8sZ5l/LaOYyQv2bQCG2uSoBsA5LLtrJA=) 4: DPQ4lobYeO0VP08NT9GHfgxOhSY.roa (hash: 2RKoD6fwgQ1seMh+yQ3jt5FfnFXmWPkDu+JFGWwpf6c=) 5: HpSsS9oTGcryjVlXzs1iVA7wlS0.roa (hash: N6leFNt29ZYPWsMZYSAJZAq72uI+HSzVBdQsRd6qt6A=) 6: UmSK1IWq9lw9ipcgZEuVj4Ihwpo.roa (hash: OECAPr+AXlZdxy0aP2+ALxhdREhiJGHrV4ALqPJcDxM=) 7: Vw8BcVLWd6Lw_oVjf_viu8i3MLE.roa (hash: N84k/ceenoSIO3tWCvtZDJlVCBJMxt8O2b2U6++mkZ4=) 8: XyIzWZq8_K8_I1Ds8SDCTRA0MdA.roa (hash: 86Gf2QfOOd1QJHEt+q+hnkiI1H1H2wehYDetTF1Z0DI=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: szRAfBQVMFfbMwKstMzO9QRp8O+DbSD0V5uWJgwb4N0=) 10: n6O5_xyiwHBzRq3T31qtxNIgez4.roa (hash: ZfdKdUc5WmWGx+RbTe3ElfV2Obld7AHufUk8nol+Rbk=) 11: pXJOlhv9zZYCd5LrmfyJ6C12daA.roa (hash: BysxWph7l3Y6HsVVVfdukxlo1YYagsJx3rFBwhuWLFM=) 12: s5EC7AHkvceoRkWAQt_dFA3VUhQ.roa (hash: GaNkGcUWgwo54m5AfNqgKpd6K16/xjyHWX1yl/8EtQM=) 13: zJd3z7yj1UMI3HsfOzDFOFajoMU.roa (hash: lNwH2TDbfd59FunYQUXicuLKpPwBO1QgbfPDYCj6vCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:99:ae:3a:3a:23:49:df:f0:6f:18:9a:c0:b0:84:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Nov 22 02:00:46 2024 GMT Not After : Nov 23 02:00:46 2024 GMT Subject: CN=8e6e62f6d01ac347ab2cba2349a6991fbf72b5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:e5:69:62:c1:07:8b:46:36:fc:5d:4f:80: ce:bb:2c:4f:da:e4:b3:79:2a:db:e3:db:8b:dc:40: 2e:06:be:88:5e:90:7c:c0:69:52:ef:3c:52:6a:24: eb:69:f9:6f:a7:8d:30:f8:a6:91:cb:88:b7:f1:6b: 0d:13:7c:a7:2b:7d:a4:55:5e:ff:c1:92:40:9f:f7: d8:8f:0f:c7:47:2b:28:0c:0a:d8:a7:59:03:74:e1: a2:49:38:9b:6e:4c:c5:cc:6e:e5:31:06:aa:95:56: 19:80:19:f6:89:56:b7:5c:3c:6a:74:27:50:8d:23: 5c:8e:df:b4:d1:72:ae:38:3f:38:90:92:e4:49:58: 15:08:d1:56:9e:f9:1d:f0:38:f9:b8:5f:22:de:09: 93:35:4e:a3:19:90:f9:ca:e3:69:9d:8b:bd:f3:24: 52:3c:f0:bc:b5:02:d7:bb:7c:e4:3a:50:ea:71:60: ce:c6:3a:c0:22:b7:b5:4a:43:09:8d:c8:2f:49:cf: 39:3b:b2:fa:39:c8:ae:b1:67:a0:f9:86:eb:f4:f1: a6:83:4f:fc:30:ae:dd:b9:ad:17:8d:72:f7:73:94: f4:cd:fc:30:c2:ee:2b:76:b4:88:41:f9:1e:d4:24: 8c:39:26:ab:9b:27:2d:57:35:c8:db:ae:c7:70:95: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6E:62:F6:D0:1A:C3:47:AB:2C:BA:23:49:A6:99:1F:BF:72:B5:F9 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:1d:cd:38:e7:f7:70:2a:f8:6f:0a:f5:89:98:1a:50:3c:f3: b1:09:87:16:98:ec:c3:d1:45:a9:bd:30:6e:c0:33:5b:a4:84: 07:c3:cd:54:9d:23:72:c3:21:c7:9f:7c:12:32:b0:89:db:4f: c9:36:1a:b7:16:6c:97:40:8d:3f:d3:c3:5c:f6:73:8c:43:22: 0b:00:5f:ce:0c:d9:cf:5a:dd:a0:13:f8:ec:35:1d:b8:d7:ce: 62:cd:99:83:55:af:69:62:87:76:07:29:42:5e:2b:39:fe:fa: 0a:2c:31:68:d5:26:3a:a0:75:65:29:51:6b:1c:f3:92:a3:e4: 02:9f:4d:70:28:f1:c7:c4:96:48:e0:96:58:73:ac:62:ec:b3: 53:cf:5d:9f:34:e2:eb:f6:29:1d:93:55:7f:9c:d6:89:62:2e: b4:a9:28:ad:35:28:11:2c:f1:eb:aa:23:30:0d:e0:0a:5d:fa: 39:a6:c7:17:54:5d:82:89:52:0d:d2:21:d2:58:65:96:60:ea: d4:80:49:6a:2e:9d:ca:ea:75:94:f7:6f:5e:80:fe:45:18:69: 65:05:3b:ba:c9:12:13:aa:90:22:33:4f:d9:1e:85:d1:19:25: 47:71:47:f9:b6:d5:f8:c7:cb:1d:16:83:c7:f6:b8:d0:f3:ce: 84:c2:17:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRma46OiNJ3/BvGJrAsIRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjQxMTIyMDIwMDQ2WhcNMjQxMTIzMDIwMDQ2WjAzMTEwLwYDVQQD Eyg4ZTZlNjJmNmQwMWFjMzQ3YWIyY2JhMjM0OWE2OTkxZmJmNzJiNWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4TlaWLBB4tGNvxdT4DOuyxP2uSz eSrb49uL3EAuBr6IXpB8wGlS7zxSaiTraflvp40w+KaRy4i38WsNE3ynK32kVV7/ wZJAn/fYjw/HRysoDArYp1kDdOGiSTibbkzFzG7lMQaqlVYZgBn2iVa3XDxqdCdQ jSNcjt+00XKuOD84kJLkSVgVCNFWnvkd8Dj5uF8i3gmTNU6jGZD5yuNpnYu98yRS PPC8tQLXu3zkOlDqcWDOxjrAIre1SkMJjcgvSc85O7L6OciusWeg+Ybr9PGmg0/8 MK7dua0XjXL3c5T0zfwwwu4rdrSIQfke1CSMOSarmyctVzXI267HcJXXqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5uYvbQGsNHqyy6I0mmmR+/crX5MB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApB3NOOf3 cCr4bwr1iZgaUDzzsQmHFpjsw9FFqb0wbsAzW6SEB8PNVJ0jcsMhx598EjKwidtP yTYatxZsl0CNP9PDXPZzjEMiCwBfzgzZz1rdoBP47DUduNfOYs2Zg1WvaWKHdgcp Ql4rOf76CiwxaNUmOqB1ZSlRaxzzkqPkAp9NcCjxx8SWSOCWWHOsYuyzU89dnzTi 6/YpHZNVf5zWiWIutKkorTUoESzx66ojMA3gCl36OabHF1RdgolSDdIh0lhllmDq 1IBJai6dyup1lPdvXoD+RRhpZQU7uskSE6qQIjNP2R6F0RklR3FH+bbV+MfLHRaD x/a40PPOhMIXgA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:23 2024 by rpki-client on console-fra.rpki-client.org